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IMPROVED VEHICLE STOPPING SYSTEM AND METHOD 

by 
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This application claims the benefit of U.S. Provisional Patent Application No. 

60/ filed on January 23, 2004, by John G. Bate et al. for "Improved Vehicle 

Stopping System and Method. The entirety of that Provisional Patent Application is 
10 incorporated here by reference. 

The present invention concerns vehicle recovery, for example during criminal 
events when there is need to disable the vehicle to prevent theft of cargo, or operating 
the vehicle in unauthorized manner or location. Disabling the vehicle in this invention is 
tied to an improved safety from the standpoint of the driver, the terrain, and the 
1 5 surrounding traffic environment. 

BACKGROUND 

In various countries in the world, we can find vehicle and vehicle cargo theft 
common-place. Certain historical events have also contributed to a growing need for 
additional safety in terms of both finding the vehicle as well as stopping the vehicle. 

20 It is already common to see a vehicle stopped by the side of the road due to 

mechanical or electrical problems. In the future, it may be more common to see 
vehicles stopped due to some event that caused it to shutdown. However, even if a 
vehicle stopping system is never used, it is at least available. 

Many vehicles today have a built in method of shutting off the engine to prevent 

25 damage to the engine. Instances of this include loss of oil or engine coolant, or some 
other failure that would, if left unchecked, damage the engine. The damage is usually 
prevented by the system initiating an internally triggered engine shutdown. 

Many vehicles will typically have some kind of data communication device, 
sending information about the vehicle's operating state, messages to or from the driver, 

30 and keeping track of the vehicle and or cargo. The communication device may be short- 
range RF wireless, or long-range cellular phone or satellite-based or other type of 
carrier. 

The communication link between the truck and another location (typically a 
dispatch station) may also keep track of the location of the vehicle for the sole purpose 

1 



Attorney Docket No, 0210-003 
U.S. Patent Application No. 

of ensuring that it stays on its planned path. Any deviation from this path may indicate 
theft - in some cases of extremely valuable cargo (real or perceived); theft may be the 
only reason the cargo strays from the scheduled path. 

Some communication systems have a tight connection to the vehicle and vehicle 
5 operation. Many systems today have means of stopping the vehicle by disabling the 
engine, cutting fuel, etc. The engine shutdown mechanisms are typically simple. 
Stopping the fuel to the engine will typically bring the engine to a halt rather quickly. 

Less simple methods may be better control on a road speed limit switch used in 
conjunction with the fuel shutoff. Additionally, if the connections are made to a vehicle's 
. 10 electrical control center, there is more control and better feed-back to the driver. 

Some systems just stop the fuel flow. Others limit road speed first, then stop fuel 
flow. Others are connected to the electrical system and can limit road speed as well as 
stop the engine, both via electrical inputs. 

U.S. Patent No. 6,549,130 discloses an anti-theft system for remote actuation. 
15 The system can be programmed to control multiple parameters, such as timing, and/or 
the degree of disabling and re-enabling of various vehicle systems may be 
programmed. 

U.S. Patent No. 5,937,823 discloses an anti-theft system that monitors the speed 
and disables the engine when the speed falls below a pre-set value. The engine may 
20 also be controlled and gradually shutdown by Interrupting the ignition system. See the 
abstract. 

U.S. Patent No. 6,504,472 B2 describes engine shutdown accomplished by 
opening/closing a relay which opens the ignition coil circuit. 

U.S. Patent No. 6,549,130 B1 discloses an external command that can disable 
25 the vehicle ignition system. Disablement only prevents the vehicle from restarting. 

U.S. Patent No. 6,249,215 B1 has a main idea to use vehicle-side analysis to 
allow the stopping of the vehicle only in an area deemed "traffic-safe". If unsafe, power 
is reduced; if safe, engine shutdown is executed. The Vehicle-side analysis device 
checks for safe/unsafe conditions. A second point is to use GPS - enter all unsafe 
30 areas in a database (DB), then use the vehicle's GPS location to detennine if the 
vehicle is in a safe area. A third condition is to monitor air quality to identify if the 
vehicle is at a gas station. A fourth condition is to detenmine if the vehicle is being 
towed or carried by another vehicle. A fifth point is to progressively reduce the available 
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engine power step-by-step or continuously. A sixth point is to allow shutdown only if the 
vehicle is parked. 

U.S. Patent No. 6,313.140 B1 describes a control system in a stolen vehicle that 
is operated to bring the stolen vehicle to a safe stop. One control system example could 
5 be fuel regulation, reducing the fuel supply rate to reduce the engine power until stalling 
or idling (and keeping the steering system operable). Other examples would be to 
activate the brakes, steering control, clutch, reducing amount of engine power passed 
through transmission. 

U.S. Patent 6,347,276 B1 discusses methods of writing to an EEPROM in an 
10 engine control unit. 

U.S. Patent No. 5,925,940 discusses methods of remotely applying the parking 
brake that can be applied while a vehicle is driving. 

U.S. Patent No. 5,937,823 discusses remote engine shutdown by receiving a 
command from a selective call radio. Shutdown is accomplished by interrupting the 
15 ignition intermittently if engine speed is greater than a pre-set value or immediately if 
engine speed is lower than the pre-set value. Engine speed is measured with a 
tachograph. 

U.S. Patent No. 5,977,654 discusses engine disablement after detection of an 
unauthorized vehicle startup. Engine shutdown is accomplished with a relay to 
20 disconnect the battery and ground the battery cable. 

U.S. Patent No. 6,072,248 discusses remote engine shutdown by multi-step fuel 
reduction control to fuel pump via engine module and intermittently pulsing fuel 
pump/supply, first to slow the vehicle to below idle speed, then to stall the engine with 
total fuel shut off. 

25 U.S. Patent No. 5,513,244 discusses prohibiting remote engine restart. The 

engine must be off before this can take place. 

U.S. Patent No. 5,563,453 discusses remote control of vehicle, and includes a 
vehicle locking system so as to lock the vehicle, and interrupting the voltage to one or 
more of the vehicle electrical circuits so as to deactivate the engine, close windows, etc. 
30 U.S. Patents No. 5,638,044 and No. 5,819,869 discuss remote engine shutdown 

by disconnecting the ignition coil. 

U.S. Patent No. 5,463,372 discusses basic engine shutdown by interrupting the 
electronic distributor or EFI control voltage. Intermittent interruption of the voltage would 
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put the system in a partially disabled state, and full interruption would be a complete 
shutdown state. 

U.S. Patent No. 4,878,050 discusses vehicle control, decelerating, stopping after 
a delay (by control of either the engine timing or fuel supply), fuel disengage (with a 
5 mechanical plunger and membrane), engine disabling by use of a relay between 
ignition coil and spark plugs. 

U.S. Patent No. 4,292,620 discusses a vehicle disabling system actuated by low 
fuel level in tank. A hidden switch can be set such that a full tank of fuel looks like an 
empty tank. The shutdown mechanics connect a relay to the starter circuit, and also a 
. 10 means to turn off the engine and visual and audio driver feed-back. No external control 
and no control of road speed limiting is discussed. 

Typical use scenarios for the need to shutdown the engine begin when some 
external event is received by the vehicle's communication system, translated into a 
shutdown command, and the engine shuts down. The police will probably know where 
15 the vehicle is at this time. The thief, realizing that his time may be up, leaves the vehicle 
where it stopped. The police, upon arriving at the vehicle, find that it is in a location that 
is very dangerous. This might be an intersection, train crossing, etc. There might be 
hazardous chemicals In the vehicle and it may have stopped near a populated center or 
on a bridge. 

20 Some triggering events include but not limited to: 

1. Vehicle moving outside a specified GPS location by some predetermined distance. 

2. Vehicle getting close to a GPS location by some predetermined distance. 

3. Driver-initiated via button. 

4. Communication device command. 
25 5. Communication device alarm system. 

6. Vehicle alarm system. 

7. Law enforcement controlled. 

SUMMARY 

What is needed is some adaptive shutdown system that gives the driver (police) 
30 a chance to move the disabled vehicle to a new location, safely, and out of the way. 

Another aspect of this invention is a safety factor never considered before: shutdown of 
the engine while driving down a hill. The typical command would shutdown the engine 
without regard to the terrain, not realizing that when the engine is stopped there may be 
no power to the brakes and or steering system or an ability to shift to a safer gear ratio. 
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What is needed in this second situation is that the engine is allowed to keep running 
during these hill situations. The hill will end some time, but the need to control the 
vehicle from a safety standpoint is also important. 

Applicants address these concerns with an invention that in one aspect provides 
5 a method of controlling a vehicle that includes the steps of reducing a speed of the 
vehicle in response to a vehicle shutdown signal, monitoring at least one of a speed of 
the vehicle and a torque of an engine of the vehicle, determining whether the monitored 
at least one of the speed and torque is decreasing, if the monitored at least one of the 
speed and torque is not decreasing, enabling the engine of the vehicle to operate at a 
. 10 reduced power level, and stopping the vehicle when the monitored at least one of the 
speed and torque has reached a predetermined level. 

In another aspect, there is provided a control system for a vehicle that includes a 
processor that reduces a speed of the vehicle in response to a vehicle shutdown signal. 
The processor monitors at least one of a speed of the vehicle and a torque of an engine 

15 of the vehicle and determines whether the monitored at least one of the speed and 
torque is decreasing. If the monitored at least one of the speed and torque is not 
decreasing, the processor enables the engine of the vehicle to operate at a reduced 
power level. The processor causes the vehicle to stop the vehicle when the monitored 
at least one of the speed and torque has reached a predetermined level. 

20 In yet another aspect, there is provided a computer-readable medium containing 

a computer program for controlling a vehicle. The computer program performs the steps 
of reducing a speed of the vehicle in response to a vehicle shutdown signal, monitoring 
at least one of a speed of the vehicle and a torque of an engine of the vehicle, 
determining whether the monitored at least one of the speed and torque is decreasing, 

25 if the monitored at least one of the speed and torque is not decreasing, enabling the 
engine of the vehicle to operate at a reduced power level, and stopping the vehicle 
when the monitored at least one of the speed and torque has reached a predetermined 
level. 

BRIEF DESCRIPTION OF THE DRAWINGS 
30 The several features, objects, and advantages of this invention will be apparent 

from reading this description in conjunction with the drawings, in which: 

FIG. 1 is a block diagram of a system in accordance with Applicants' invention; 
FIG. 2 is a flow chart of a method in accordance with Applicants' invention; and 
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FIG. 3 is a timing diagram that schematically depicts variations of engine power 
or torque with respect to time. 

DETAILED DESCRIPTION 
One part of this invention concerns engine shutdown during events, such as 
5 criminal events. As depicted in FIG. 1, the components of the system 100 include a 
controller and speed regulator 102 for the engine 104, speed, torque, and power 
sensors 106, 108, 110, a driver display 1 12, and a communication system 114 capable 
of receiving and sending coded messages to control the engine shutdown. Additional 
components include timers, which may be conveniently implemented in software in the 
10 control module 102. It will be understood that the engine 104 is responsive to control 
signals produced by the controller 102. 

The receipt of a coded engine shutdown message would begin the sequence by 
warning the driver of the imminent engine shutdown via the display 1 12. An exemplary 
sequence is depicted in FIG. 2, with receipt of the shutdown signal indicated by step 
15 202. One or more road speed sensors 106, 108 would identify the speed to the system. 
A road speed regulator, such as the brakes on the wheels, would be triggered to begin 
slowing the vehicle to a safe speed. This is depicted in FIG. 2 by step 204. "Safe" may 
mean about 20kph or slower, but of course different conditions may require different 
"safe" speeds. It will be appreciated that regulating engine speed may be used instead 
20 of or together with the wheel brakes to slow the vehicle. 

One form of this invention might use a torque regulator instead of a speed 
regulator. This would work to reduce or control torque rather than road speed. In 
modern vehicle engines, such torque control is readily implemented by production of 
suitable engine control signals by the engine controller 102. A signal to control the 
25 torque would prevent the vehicle from moving by reducing the torque generated by the 
engine 104. The first step of torque regulation may be to reduce torque by a 
predetermined amount, such as 50%. Another form of this invention would slowly 
decrease the torque output. The vehicle will eventually stop. 

At some point, just prior to shutting down the engine an "engine shutdown" or 
30 "vehicle disabled" icon might be shown to the driver on the display 1 12. At that point the 
engine is off. As described in more detail below, the point of engine shutdown is 
permitted to occur after the "safe" speed is reached (step 206). 

A second part of this invention concerns the control during dangerous driving 
situations - by this is meant when driving down a hill, for example. Gravity will play a 
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big part in defining exactly when the vehicle will stop. If the road speed limit is applied 
and then engine stop command applied (as identified in flat road testing) then the 
vehicle will really be out of power, leading to crash potentials when lack of power 
controls steering and brakes. As depicted in FIG. 2, once the "safe" speed is reached, a 
5 countdown to engine shutdown begins (step 208) and continues (step 210) provided 
that the speed does not exceed the "safe" speed (step 212). Once the countdown has 
elapsed (step 214), the engine shutdown command is given (step 216). If the safe 
speed is exceeded during the countdown, for example because the vehicle has begun 
traveling down a steep hill, the countdown is re-started. 

10 Another main idea here is to allow multiple engine shutdown periods (or vehicle 

disabled periods) such that the vehicle may be moved as necessary during the 
subsequent engine shutdown periods. Such periods are depicted in FIG. 3, which is 
described in more detail below. One form would allow for variable delays between 
shutdown periods, some of which may be shorter (the second may be shorter than the 

15 first, the third shorter than the second, etc.) or longer (the second may be longer than 
the first, the third longer than the second, etc.). Another forni allows for variable times 
between engine shutdown periods, possibly with an ignition key cycle required. Another 
form allows for variable times of engine enabling. Another fomi allows for these delays 
to be controlled by initial road speeds, vehicle mass (as calculated by torque 

20 requirements). Another form allows that engine enable periods are based on distance 
traveled ~ in this case the distance might be limited to enough to move the vehicle out 
of an intersection, off the railroad tracks, or off a bridge. 

The main idea would also allow installation on any type of vehicle transmission. 
One form of this invention includes an immediate engine shutdown without 

25 slowing the road speed during the process (possibly with a warning to the driver). This 
case will cover the cases when extra hardware is not installed on the vehicle to effect 
the road speed or torque limiting functions. Another form of this invention would control 
the fuel to the engine to simulate an empty fuel tank or faulty injectors on one or more 
cylinders. Another form of this invention includes an immediate engine shutdown if the 

30 vehicle is already at zero speed. Another form of this invention requires that the driver 
must actually stop the vehicle before the engine shutdown is accomplished. The idea 
might also require the driver to set the parking brake. 

As described above, another form of this invention would allow the system to 
slowly decrease the road speed limit or maximum torque such that the system ends 
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with a net result of zero speed after a period of time. The period of time (the length of 
the countdown in FIG. 2) would be dependent on the terrain (hills) and or vehicle load. 
At each point of time the system reduces the road speed or torque thereby reducing the 
speed and or power available to the vehicle. Another form would allow the system to 
5 step-wise decrease the road speed limit or maximum torque. One form of this invention 
would control the vehicle only such that at the end the engine is still operating but just 
enough to allow power steering and possibly operate a refrigeration system. 

One form of this invention allows the last component of the engine shutdown to 
be temporarily delayed while the vehicle is traveling down a hill (i.e., the road speed 
10 and or torque requirements demand continued vehicle operation for safety and 
controllability). 

The timings of the controls effected by this invention in one example are 
depicted in FIG. 3, in which the vertical axis is road speed or torque availability, with 
a < b. The horizontal axis is time, with time c eariier than time n. At time c, the 

15 command is received to shut the engine, and a warning is displayed to driver. At time d, 
the system 100 limits the road speed or torque, and vehicle slowdown is in progress. At 
time e, the vehicle achieves a road speed limit or torque limit, i.e., the vehicle is allowed 
to operate in a very much reduced manner. At times f and g, the system shuts down the 
vehicle engine or sets the maximum road speed to zero, or limits the torque to just 

20 allow engine idle operation. At times g, h, I, the system is disabled, and may be waiting 
for timer or key cycle. Times i, J, k and m and n depict multiple engine-enabled periods. 

It should be understood that at points 1 and 2 (time d), an immediate engine 
shutdown is optional. Between points 3 and 4 (times e and f, respectively), a delay 
before engine-shutdown can be had, and driver warnings may be displayed. At points 4 

25 and 5 (times f and g), an immediate shutdown from the already reduced speed can be 
had. Optionally, the system can require that the driver stop the vehicle before 
completing the engine shutdown. At points 6 and 7 (time periods i-j and m-n), the 
engine and or vehicle is enabled at a reduced operational mode. Point 5 and point 6 do 
not necessarily have to be the same time, i.e., the periods f-g and j-k do not need to be 

30 equal, nor does the road speed or torque limit have to be the same. At points 9, 10, and 
1 1 (time periods g-i, k-m, and >n), the vehicle is disabled. The times do not necessarily 
have to be the same, and the engine may be idling or at a reduced torque setting. 

It will be appreciated that procedures described above may be carried out 
repetitively as necessary to control a vehicle. To facilitate understanding, many 
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aspects of the invention are described in terms of sequences of actions that can be 
perfomried by, for example, elements of a programmable computer system. It will be 
recognized that the various actions could be performed by specialized circuits (e.g., 
discrete logic gates interconnected to perform a specialized function or application- 
5 specific integrated circuits), by program instructions executed by one or more 
processors, or by a combination of both. 

Moreover, the invention can additionally be considered to be embodied entirely 
within any form of computer-readable storage medium having stored therein an 
appropriate set of instructions for use by or in connection with an instruction-execution 

10 system, apparatus, or device, such as a computer-based system, processor-containing 
system, or other system that can fetch instructions from a medium and execute the 
instructions. As used here, a "computer-readable medium" can be any means that can 
contain, store, communicate, propagate, or transport the program for use by or in 
connection with the instruction-execution system, apparatus, or device. The computer- 

15 readable medium can be, for example but not limited to, an electronic, magnetic, 
optical, electromagnetic, infrared, or semiconductor system, apparatus, device, or 
propagation medium. More specific examples (a non-exhaustive list) of the computer- 
readable medium include an electrical connection having one or more wires, a portable 
computer diskette, a random-access memory (RAM), a read-only memory (ROM), an 

20 erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, 
and a portable compact disc read-only memory (CD-ROM). 

Thus, the invention may be embodied in many different forms, not all of which 
are described above, and all such forms are contemplated to be within the scope of the 
invention. For each of the various aspects of the invention, any such form may be 

25 referred to as "logic configured to" perform a described action, or alternatively as "logic 
that" performs a described action. 

It is emphasized that the terms "comprises" and "comprising", when used in this 
application, specify the presence of stated features, integers, steps, or components and 
do not preclude the presence or addition of one or more other features, integers, steps, 

30 components, or groups thereof. 

The particular embodiments described above are merely illustrative and should 
not be considered restrictive in any way. The scope of the invention is determined by 
the following claims, and all variations and equivalents that fall within the range of the 
claims are intended to be embraced therein. 
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